Article View: comp.security.firewalls
Article #384Re: Authentication with Firewall-1 NG with AI
From: Dan
Date: Wed, 28 Jan 2004 22:32
Date: Wed, 28 Jan 2004 22:32
36 lines
2888 bytes
2888 bytes
Does anyone no when checkpoint expects to provide client authentication for ssh as well as telnet, ftp, http and https, and rlogin? Thanks. "Jason Kau" <jkau@vulture.cnd.gatech.edu> wrote in message news:bv331f$jap$1@news-int2.gatech.edu... > MichaelK <m_keightley@yahoo.co.uk> wrote: > > Seems that S/Key authentication has been removed from the latest version > > of Firewall-1 (NG with Application Intelligence R55). > > We have lots of Linux and MacOSX users, SecuRemote only seems to be available > > for Window$. > > SecuRemote NG is available for Redhat 7.2 and 7.3--not sure if it will work > with later versions of RedHat. You should be able to get FreeS/WAN to work > with VPN-1. As for MacOS X, you can use third-party VPN clients like > VaporSec or Equinux VPN Tracker. > > > Found SecuRemote to be very flakey software on Windows anyway. > > SecuRemote NG FP3 Build 53515 has worked great for us on Win2K/XP. > > > So how are people meant to authenticate securely. > > RSA SecurID or any other time-synchronization tokens that can be accessed via > RADIUS/TACACS, e.g. Vasco? Client certificates (Entrust or internal CA)? > > -- > Jason Kau > http://www.cnd.gatech.edu/~jkau
Technical Details
Message-ID:
<NaGdnfzQiur0pYXdRVn-sw@speakeasy.net>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!elnk-pas-nf1!newsfeed.earthlink.net!pd7cy1no!shaw.ca!border1.nntp.ash.giganews.com!border2.nntp.sjc.giganews.com!border1.nntp.sjc.giganews.com!nntp.giganews.com!local1.nntp.sjc.giganews.com!nntp.speakeasy.net!news.speakeasy.net.POSTED!not-for-mailReferences:
<bdf31434.0401251102.69b77a54@posting.google.com> <bv331f$jap$1@news-int2.gatech.edu>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,7dd47d72930ea9c7 X-Google-Attributes: gidf922c,public X-Google-Thread: fc559,7dd47d72930ea9c7 X-Google-Attributes: gidfc559,public X-Google-ArrivalTime: 2004-01-28 14:32:13 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!elnk-pas-nf1!newsfeed.earthlink.net!pd7cy1no!shaw.ca!border1.nntp.ash.giganews.com!border2.nntp.sjc.giganews.com!border1.nntp.sjc.giganews.com!nntp.giganews.com!local1.nntp.sjc.giganews.com!nntp.speakeasy.net!news.speakeasy.net.POSTED!not-for-mail NNTP-Posting-Date: Wed, 28 Jan 2004 16:32:09 -0600 Reply-To: "Dan" <bitsandbytes88@hotmail.com> From: "Dan" <bitsandbytes88@hotmail.com> Newsgroups: comp.security.firewalls,cp.products.firewall-1 References: <bdf31434.0401251102.69b77a54@posting.google.com> <bv331f$jap$1@news-int2.gatech.edu> Subject: Re: Authentication with Firewall-1 NG with AI Date: Wed, 28 Jan 2004 17:32:05 -0500 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Message-ID: <NaGdnfzQiur0pYXdRVn-sw@speakeasy.net> Lines: 38 NNTP-Posting-Host: 199.249.158.90 X-Trace: sv3-FTCl11PAcdt7DWFY7nyrA2pbQr1k+5dWJyFNxkQdlLhPKlx2e5J9SrDGlLh8vbPTBcl14hoOYcuX3OF!Lxo2wKrk11Qk7wSD04BuH4SZIO6hueyCwsdjSCN2qVk5p0GDx9R47H8wqWLy+HASjn995Q1Gncx7!7S48vEHrMJ9/ReWD X-Complaints-To: abuse@speakeasy.net X-DMCA-Complaints-To: abuse@speakeasy.net X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.1